Results (page 1): (releas$4 same ((confidential or personal or patient) near2 (record or inf... Page 1 of 4 



0 PORTAL 



USPTO 



Search: ® The ACM Digital Library C The Guide 




Feedback Re port a problem Satisfaction survey 



Terms used: 

rele**$4 same confidential or personal or patient near2 vtssut or inlsli same a mh ortet6 or au th e n ti c or ye rift 4 and h<?tpiU\ or hearthte 



Found 2,948 of 206,978 



fe°s rt Ul tsbyl releVanCe 



Display 
results 



exp anded form 



Save resul ts to a Binder 

u S earch Tips 
[J Open results in a new window, 



Try an Adva nced Se arch 

Try this search in The ACM Guide 



Results 1 - 20 of 200 
Best 200 shown 

1 



Result page: 12345678910 next 



Relevance scale □QEil 



Current issues in confidentiality: Computerized information systems, medical records, and ^1 
patient ri g hts *™ 

Patricia T Fletcher 

August 1986 ACM SIGCAS Computers and Society, Volume 16 Issue 2-3 

Publisher: ACM Press 

Fut! text available: iS 1 ) PdUSSS^USB} Additional Information: fu ll ca tion, inde>LiSi<M 



Cryptography and data security 

Dorothy Elizabeth Robling Denning 

January 1982 Book 

Publisher: Addrson-Wesley Longman Publishing Co.. Inc. 
Fult text available: ^m*li>M}MUA&] 




Additional Information: fidLcJlatiQD. Bfesftaet. ceMeD.C.e.5, CI.to.gS-. indWJ.emS. 



From the Preface (See Front Matter for full Preface) 



u 



Electronic computers have evolved from exiguous experimental enterprises in the 1940s to prolific 
practical data processing systems in the 1980s. As we have come to rely on these systems to 
process and store data, we have also come to wonder about their ability to protect valuable data. 



Data security is the science and study of methods of protecting data in computer and 
communication systems from unauthorized disclosure ... 

3 A model of OASIS role-based access control and its su p port for active securit y ^1 
Jean Bacon, Ken Moody, Walt Yao "™ 
NjP November 2002 ^CM Transactions on Information and System Security (TISSEC), Volume 5 issue 4 

Publisher: ACM Press 

Full text available: ^■Pjpdf(3$2.Q$ KP) Additional Information: fgl| cjfttion. ?t??tt?ct. references, citings jndg* tqrms 

OASIS is a role-based access control architecture for achieving secure interoperation of services in 
an open, distributed environment. The aim of OASIS is to allow autonomous management domains 
to specify their own access control policies and to interoperate subject to service level agreements 
(SLAs). Services define roles and implement formally specified policy to control role activation and 
service use; users must present the required credentials, in an appropriate context, in order to 
activat ... 

Keywords: Certificates, OASIS, RBAC, distributed systems, policy, role-based access control, 
service-level agreements 
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An international collaborator/ based on virtual patient records ^1 
David G. Kilman, David W. Forslund 

August 1997 Communications of the ACM, Volume 40 Issue 8 

Publisher: ACM Press 

Full text available: GdfiZ34j)£H61 Additional Information: (gJttftaten. MeieQCes. sitjOSS. indfiiLleims 



Security-con trol methods for statistical databases: a comparative stud y | | 

Nabil R. Adam, John C. Worthmann ™" 
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December 1989 ACM Computing Surveys (CSUR), Volume 21 Issue 4 

Publisher: ACM Press 

Full text available; ^m*\ pdWJHMB] Additional Information: ful^iMion, afcMtacl. I»felSIK8.e.. ffi&OflS. ilKteXJSIffia. review 



This paper considers the problem of providing security to statistical databases against disclosure of 
confidential information. Security-control methods suggested in the literature are classified into four 
general approaches: conceptual, query restriction, data perturbation, and output perturbation. 
Criteria for evaluating the performance of the various security-control methods are identified. 
Security -control methods that are based on each of the four approaches are discussed, t ... 

Selected writings on computing: a personal pers p ective | | 

Edsger W. Dijkstra mmd 

January 1982 Book 

Publisher: Springer-Verlag New York, Inc, 

Full text available: S%JMffl51L9jiMBJ Additional Information: fjJja&tiflQ. BbSirMt. Ufeteacej, citM.b_y, iflflexjeims 




Since the summer of 1973, when I became a Burroughs Research Fellow, my life has been very 
different from what it had been before. The daily routine changed: instead of going to the University 
each day, where I used to spend most of my time in the company of others, I now went there only 
one day a week and was most of the time that is, when not travelling!— alone in my study. In my 
solitude, mail and the written word in general became more and more important. The circumstance 
that my employe ... 

Illustrative risks to the public in the use of computer systems and related technolog y | | 

Peter G. Neumann .™™ 
January 1996 ^CM SIGSOFT Software Engineering Notes, Volume 21 issue l 

Publisher: ACM Press 

Full teirt available: JE^P.gfl.Z^AMB] Additional Information: toJUi&tiQQ 
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Risks to the public: Risks to the public | | 

Peter G. Neumann ™™ 
March 2006 ACM SIGSOFT Software Engineering Notes, Volume 31 issue 2 

Publisher: ACM Press 

Full text available: aC^pffl.M Jj K B) Additional Information: MjBtatipj). fifeSlWiJ. iMei-tSUQ?. 




Edited by Peter G. Neumann (Risks Forum Moderator and Chairman of the ACM Committee on 
Computers and Public Policy), plus personal contributions by others, as indicated. Opinions 
expressed are individual rather than organizational, and all of the usual disclaimers apply. We 
address problems relating to software, hardware, people, and other circumstances relating to 
computer systems. To economize on space, we include pointers to items In the online Risks Forum: 
(R i j) denotes RISKS vol i number ... 

Illustrative risks to the public in the use of computer systems and related technolog y | | 

Peter G. Neumann 

January 1994 ^CM SIGSOFT Software Engineering Notes, Volume 19 Issue l 

Publisher: ACM Press 

Full text available: 45*1 pjJl(12!MB) Additional Information: fclsilatian, CiSQOS. iadeaJfiims. 



1Q Risks to the public: Risks to the public | | 

4^ Peter G. Neumann ™™ 
jury 2005 ACM SIGSOFT Software Engineering Notes, Volume 30 Issue 4 

Publisher: ACM Press 

Full text available: rf5^njJIL15LZ7J<Bl Additional Information: IkdLciiatioja. ?bstta.$t. index, terms 




11 





Edited by Peter G. Neumann (Risks Forum Moderator and Chairman of the ACM Committee on 
Computers and Public Policy), plus personal contributions by others, as indicated. Opinions 
expressed are individual rather than organizational, and all of the usual disclaimers apply. We 
address problems relating to software, hardware, people, and other circumstances relating to 
computer systems. To economize on space, we include pointers to items in the online Risks Forum: 
(R i j) denotes RISKS vol i number ... 

L-diversity: Privacy beyond /(-anonymity I | 

Ashwin Machanavajjhala, Daniel Kifer, Johannes Gehrke, Muthuramakrishnan Venkitasubramaniam ™ 
March 2007 ACM Transactions on Knowledge Discovery from Data (TKDD), Volume l issue l 

Publisher: ACM Press 

Full text available: S% BSHL^SLQAWl Additional Information: fylL&IatiaD.. abslast, [gferens.es. jadfflLtaims 




Publishing data about individuals without revealing sensitive information about them is an important 
problem. In recent years, a new definition of privacy called /c-anonymity has gained popularity. In a 



• http://portal.acm.org/results.cfin?coll=ACM&dl=ACM«&CFID=23229092&CFTOKEN=l 870... 7/6/07 



Results (page 1): (releas$4 same ((confidential or personal or patient) near2 (record or inf... Page 3 of 4 



/c-anonym ized dataset, each record is indistinguishable from at least k - 1 other records with 
respect to certain identifying attributes. 

In this article, we show using two simple attacks that a /c-anonymized dataset has some subtle but 
severe privacy prob ... 

Keywords: &ell;-diversity, /c-anonymity, Data privacy, privacy-preserving data publishing 



12 Computer security (SEC): Formal specification of role-based security policies for clinical 
^5?^ information systems 

>r Karsten Sohr, Michael Drouineaud, Gail-Joon Ahn 

March 2005 Proceedings of the 2005 ACM symposium on Applied computing SAC '05 

Publisher: ACM Press 



Full text available: 




Additional Information: full citation , abstract, references , citings , index terms 



Many healthcare organizations have transited from their old and disparate business models based on 
ink and paper to a new, consolidated ones based on electronic patient records. There are significant 
demands on secure mechanisms for collaboration and data sharing among clinicians, patients and 
researchers through clinical information systems. In order to fulfil the high demands of data 
protection in such systems, we believe that access control policies play an important role to reduce 
the risks ... 

Keywords: LTL, authorisation constraints, healthcare environments 
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Ethics and the computerization of pharmac y | | 

Robert L. McCarthy, Judith A. Perrolle ™™ 
ACM SIGCAS Computers and Society , Proceedings of the conference on Computers 
and the quality of life CQL '90, Volume 20 Issue 3 



August 1990 



Publisher: ACM Press 
Full text available: jm*\ pdf[KSJ.Q..KB} 




Additional Information: tyJLciMiSI!, LfileLftDEftS, iodSiJSima 



14 A progn osis for use of health, medical, and g enetic information: Security and privacy after 
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Peter Swire, Lauren Steinfeld 

Aphi 2002 Proceedings of the 12th annual conference on Computers, freedom and privacy CFP 
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Su p porting the shared care of diabetic patients | | 

Tim Kindberg, Nick Bryan-Kinns, Ranjit Makwana 

November 1999 Proceedings of the international ACM SIGGROUP conference on Supporting group 
work GROUP '99 

Publisher: ACM Press 

Full text available: I^^RflfXJLQOJlBi Additional Information: fyJLdJatLQD, fifeSltafit CStaKfiS. CLtjiigs.. iMSI.t.ftD.n5 

This paper reports on a study of clinicians who care for diabetic patients, and on the design of an 
application to support their work. The clinicians' long-term activity is rooted in a series of private 
sessions with the patient. Clinicians exchange information but the timeliness, specificity and other 
salient features of the communication are often unsatisfactory. Problems consequently arise such as 
the omission or duplication of tests. We describe a conceptual framework to account for the ... 

Keywords: cooperative systems, knowledge sharing, medical informatics 



16 Data privacy and security: Personalized privacy preservation | | 

^ Xiaokui Xiao, Yufei Tao 

June 2006 Proceedings of the 2006 ACM SIGMOD international conference on Management of 
data SIGMOD '06 

Publisher: ACM Press 




Full text available: rigfrpjflMBL.50..KP]l Additional Information: iul«lJittt9D. ftb.SlL«S.t. LZfSlSSSG&S. CMlb.y, LnsteUSims 




We study generalization for preserving privacy in publication of sensitive data. The existing methods 
focus on a universal approach that exerts the same amount of preservation for all persons, with-out 
catering for their concrete needs. The consequence is that we may be offering insufficient protection 
to a subset of people, while applying excessive privacy control to another subset. Motivated by this, 
we present a new generalization framework based on the concept of personalized anonymity 
Keywords: k-anonymity, privacy preservation 
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Record linka g e and the universal identifier | | 

T. d. c. Kuch * 

December 1972 ACM SIGCAS Computers and Society, Volume 3 Issue 4 

Publisher: ACM Press 

Full text available: i^^p<Jf(9l9 30 KB) Additional Information: full citation . rfitexftat4S 
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Delegation logic: A logic-based a p proach to distributed authorization | | 

Ninghui Li, Benjamin N. Grosof, Joan Feigenbaum ™™ 
February 2003 ACM Transactions on Information and System Security (TISSEC), Volume 6 issue l 

Publisher: ACM Press 

Full text available: apM^ pdlf316.24 KB) Additional Information: full citation , abstract, rsferences. aUoas. index terms 




We address the problem of authorization in large-scale, open, distributed systems. Authorization 
decisions are needed in electronic commerce, mobile-code execution, remote resource sharing, 
privacy protection, and many other applications. We adopt the trust-management approach, in 
which "authorization" is viewed as a "proof -of -compliance" problem: Does a set of credentials prove 
that a request complies with a policy?We develop a logic-based language, called Delegation Logic 
(DL), t ... 

Keywords: Access control, Delegation Logic, distributed system security, logic programs, trust 
management 



19 Integ ratin g g lucometers and di g ital photo g raphy as experience capture tools to enhance patient | | 

understandin g and communication of diabetes self-management practices 
Brian K. Smith, Jeana Frost, Meltem Albayrak, Rajneesh Sudhakar 
Aprii2oo7 Personal and Ubiquitous Computing, Volume 11 Issue 4 

Publisher: Springer-Verlag 

Full text available: afi^Rd{($66„Q1,Kg) Additional Information: lyXsaMfin. BfesMc], index terms 




Glucometers measure the accumulation of glucose in the bloodstream and are essential for avoiding 
health complications related to diabetes. Despite their value as tools to record and present 
physiological data, they lack the ability to capture the behaviors that cause fluctuations in blood 
glucose levels, activities that ultimately need to be understood and managed in order to maintain 
good health. In this paper, we describe an intervention that introduces digital photography into 
diabetes se ... 

Keywords: Diabetes and health management, Digital photography, Experience capture and 
sharing, Information visualization, Ubiquitous computing 
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March 2000 Proceedings of the 2000 ACM symposium on Applied computing - Volume 2 SAC '00 

Publisher: ACM Press 
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